IMP(99.3.1): improve check with disabled passwords

This commit is contained in:
Charles Herlin
2019-08-28 11:49:01 +02:00
parent 96f3b74334
commit a4969e6ba6
2 changed files with 9 additions and 0 deletions

View File

@ -31,6 +31,9 @@ audit () {
passwd=$(echo "$line" | cut -d ":" -f 2)
if [[ $passwd = '!' || $passwd = '*' ]]; then
continue
elif [[ $passwd =~ ^!.*$ ]]; then
pw_found+="$user "
ok "User $user has a disabled password."
# Check password against $6$<salt>$<encrypted>, see `man 3 crypt`
elif [[ $passwd =~ ^\$6\$[a-zA-Z0-9./]{2,16}\$[a-zA-Z0-9./]{86}$ ]]; then
pw_found+="$user "